bitwarden / bitwarden/passwordless-java

Dependency Dashboard

Ouverte
#8 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
Java
Étoiles
19
Forks
6
Merge moyen
17 h 17 min
PR mergées (30 j)
1

Description

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/passwordless-java).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| maven | [com.github.tomakehurst:wiremock-jre8](https://redirect.github.com/wiremock/wiremock) | ![Available](https://img.shields.io/badge/available-green?style=flat-square) |

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [[deps]: Update gh minor](../pull/112) (`actions/checkout`, `actions/setup-java`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Update com.fasterxml.jackson.core:jackson-databind to v2.18.9 [SECURITY]](../pull/138)
- [ ] [[deps]: Replace com.github.tomakehurst:wiremock-jre8 with org.wiremock:wiremock](../pull/119)
- [ ] [[deps]: Update maven-wrapper minor](../pull/126) (`maven`, `maven-wrapper`)
- [ ] [[deps]: Update maven minor](../pull/114) (`org.sonarsource.scanner.maven:sonar-maven-plugin`, `org.apache.maven.plugins:maven-gpg-plugin`, `org.apache.maven.plugins:maven-surefire-plugin`, `org.apache.maven.plugins:maven-javadoc-plugin`, `org.apache.maven.plugins:maven-source-plugin`, `org.apache.maven.plugins:maven-resources-plugin`, `org.apache.maven.plugins:maven-compiler-plugin`, `ch.qos.logback:logback-classic`, `org.junit.jupiter:junit-jupiter-engine`, `org.slf4j:slf4j-api`, `com.fasterxml.jackson.datatype:jackson-datatype-jdk8`, `com.fasterxml.jackson.module:jackson-module-parameter-names`, `com.fasterxml.jackson.datatype:jackson-datatype-jsr310`, `org.apache.httpcomponents.client5:httpclient5`, `org.projectlombok:lombok`)
- [ ] [[deps]: Update actions/checkout action to v7](../pull/140)
- [ ] [[deps]: Update actions/setup-java action to v6](../pull/143)
- [ ] [[deps]: Update org.junit.jupiter:junit-jupiter-engine to v6](../pull/131)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [[deps]: Update com.github.tomakehurst:wiremock-jre8 to v3](../pull/58)

## Detected Dependencies

github-actions (2)

.github/workflows/cd.yml (5)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12` → [Updates: `v4.9.1`, `v6.0.0`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`

.github/workflows/ci.yml (2)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-java v4.6.0@7a6d8a8234af8eb26422e24e3006232cccaa061b` → [Updates: `v4.9.1`, `v6.0.0`]

maven (1)

pom.xml (20)

- `org.apache.httpcomponents.client5:httpclient5 5.6.3` → [Updates: `5.6.4`]
- `com.fasterxml.jackson.core:jackson-databind 2.18.8` → [Updates: `2.18.9`]
- `com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.2` → [Updates: `2.22.2`]
- `com.fasterxml.jackson.module:jackson-module-parameter-names 2.18.2` → [Updates: `2.22.2`]
- `com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.18.2` → [Updates: `2.22.2`]
- `org.slf4j:slf4j-api 2.0.16` → [Updates: `2.0.19`]
- `org.projectlombok:lombok 1.18.38` → [Updates: `1.18.48`]
- `org.junit.jupiter:junit-jupiter-engine 5.11.4` → [Updates: `5.14.4`, `6.1.3`]
- `org.assertj:assertj-core 3.27.7`
- `com.github.tomakehurst:wiremock-jre8 2.35.2` → [Updates: `3.0.1`]
- `ch.qos.logback:logback-classic 1.3.15` → [Updates: `1.3.16`]
- `org.projectlombok:lombok-maven-plugin 1.18.20.0`
- `org.apache.maven.plugins:maven-compiler-plugin 3.13.0` → [Updates: `3.16.0`]
- `org.projectlombok:lombok 1.18.38` → [Updates: `1.18.48`]
- `org.apache.maven.plugins:maven-resources-plugin 3.3.1` → [Updates: `3.5.0`]
- `org.apache.maven.plugins:maven-source-plugin 3.3.1` → [Updates: `3.4.0`]
- `org.apache.maven.plugins:maven-javadoc-plugin 3.11.2` → [Updates: `3.12.0`]
- `org.apache.maven.plugins:maven-surefire-plugin 3.5.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.7` → [Updates: `3.2.8`]
- `org.sonarsource.scanner.maven:sonar-maven-plugin 5.0.0.4389` → [Updates: `5.7.0.6970`]

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (2)

- `maven 3.9.15` → [Updates: `3.9.16`]
- `maven-wrapper 3.3.4`

mvnw (1)

- `maven-wrapper 3.2.0` → [Updates: `3.3.4`]

mvnw.cmd (1)

- `maven-wrapper 3.2.0` → [Updates: `3.3.4`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Guide de contribution

Ouvrir le guide de contribution

Piste de recherche

Il s’agit d’un tableau de bord automatisé plutôt que d’une tâche unique clairement délimitée. Examinez pom.xml, .github/workflows/ci.yml, .github/workflows/cd.yml et les fichiers du Maven wrapper, puis inspectez les pull requests Renovate liées afin de déterminer quelle mise à jour reste applicable. La tâche sera considérée comme terminée lorsqu’une mise à jour de dépendance sélectionnée aura été appliquée et que les vérifications de CI et de release du dépôt auront réussi.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
github-actions, java
Domaine
build-system, devops
Type d'issue
Refactorisation
Difficulté
5/5
Temps estimé
Plus d'une semaine
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
15/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.